Further improvements

[line-o]

After #105 is merged we can further improve on security and performance by

• set cache header for static resources
• restrict most routes to GET requests (excl. login / maybe regenerate)
• render function signatures by hand instead of automated code highlighting
• add links to specific functions (adds #<function-id> to URL; link targets already present)